Ahmed Khan

I simulated a real-world Active Directory (AD) attack to identify and exploit misconfigurations within a Windows domain environment. The goal was to practice enumeration techniques, escalate privileges to domain admin, and establish persistent access.

I started with LDAP...

I conducted a complete web application security assessment on Damn Vulnerable Web Application (DVWA) using manual and automated testing techniques. The goal was to identify and exploit OWASP Top 10 vulnerabilities.

I mapped the application using Burp Suite and discovered multiple...

I performed a complete network penetration test on a deliberately vulnerable Linux machine (Metasploitable2) to simulate a real-world attacker scenario. The objective was to identify exploitable services, gain initial access, escalate privileges to root, and extract sensitive...

You type your bank's web address. Carefully. Correct spelling. Press enter. The familiar login page appears. You enter your password. Everything feels normal. But you're not on your bank's site. You're on a perfect copy. And someone just got your credentials. That's pharming....